Access checks now being performed in privileged methods. Next thing is to check for private data leaking from sandboxes such as via callgates, propagation to other global variables, etc. I also want to be able to annotate local variables as being sandbox-private.